IN THE CLAIMS : 

Please amend the claims, as follows: 

Claim 1-21 (canceled). 

Claim 22 (currently amended): A system comprising: 
a server that provides service to a client; 

the server further comprising: 

a public-key storage unit that stores a public key assigned to the service; 

a challenge generator that generates a challenge to be sent from the server 
to the client after the server receives a request for the service from the client; 

an access privilege verifier that verifies whether a prescribed relationship 
exists between the challenge and a response, the response being corresponding the 
challenge and received from the client; and 

the client that requests the service [[to]]from the server , the client comprises: [[:]] 
the c li ent further compr i s i ng : 

an unique operation executer that executes [[an]] a first unique operation 
assigned to the client; 

an access privilege proving data storage unit that stores access privileg e 
proving data, the access privilege proving data being created from a private key 
corresponding to a public key assigned to the requested service and result of a second 
unique operation: 

a response generator that generates the response to the challenge, the 
challenge being received from the server; 
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wherein the response is calculated based on the first unique operation and 
the access privilege proving data that i s created from a pr i vate key correspond i ng to the 
pub li c key ass i gned to the serv i ce of the server ; and the un i que operat i on i s un i que to the 
c li ent , and 

wherein a valid response is not calculated unless the first unique operation 
coincides with the second unique operation . 

Claim 23 (currently amended): The system according to claim 22, wherein the server 
sends the challenge to the client with a condition for using the serv i ce server . 

Claim 24 (previously presented): The system according to claim 22, wherein the 
unique operation is used under conditions that a common cryptographic hash function is 
assigned to all client and different data is assigned to each client. 

Claim 25 (currently amended): A client that requests service to a server, comprising : 
an unique operation executor that executes a first unique operation assigned to the 

client; 

an access privilege proving data storage unit that stores access privilege proving 
data, the access privilege proving data being created from a private key corresponding to 
a public key assigned to the requested service and result of a second unique operation 
same un i que operat i on to one executed by the un i que operat i on executor ; 

a response generator that generates the response to the challenge, the challenge 
being received from the server; and 
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wherein the response is calculated based on resu l t of the first unique operation and 
the access privilege proving data, 

further a valid response is not calculated unless the first unique operation coincides 
with the second unique operation and un i que operat i on i s un i que to the c li ent . 

Claim 26 (previously presented): The client according to claim 25, wherein the 
access privilege providing data storage unit is included in a portable device. 

Claim 27 (new): A system as recited in claim 22, wherein the server is a web server 
that supplies a web application to the client; and the public key is assigned to an individual 
web page. 

Claim 28 (new): A system as recited in claim 22, wherein the server is a web server 
that supplies a web application to clients; and the public key is assigned to groups of web 
pages and is to verify the access privilege of the client for the web page when the server 
receives a request from the client to access a web page in one of the groups of web pages. 

Claim 29 (new): A server as recited in claim 22, further comprising: 

script interpreter for interpreting script designed to control the contents of service. 
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